Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS398547.roa
File: AS398547.roa (raw, json)
Hash identifier: kK16xCO88FCw2nQ38PQ0cGmRlOJRDp4t+SPUbmCd0Tg=
Subject key identifier: 9E:C7:E3:7B:45:5F:00:22:92:3E:18:AD:17:33:D5:D3:16:53:56:B4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1543B348EC6F9A17C153594440C6A1674A5570BF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS398547.roa
Signing time: Tue 11 Aug 2026 00:11:23 +0000
ROA not before: Tue 11 Aug 2026 00:06:23 +0000
ROA not after: Tue 10 Aug 2027 00:11:23 +0000
asID: 398547
IP address blocks: 181.214.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:43:b3:48:ec:6f:9a:17:c1:53:59:44:40:c6:a1:67:4a:55:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 11 00:06:23 2026 GMT
Not After : Aug 10 00:11:23 2027 GMT
Subject: CN=9EC7E37B455F0022923E18AD1733D5D3165356B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:82:9c:9d:a0:94:90:d6:51:31:5c:1d:f0:
a9:96:77:ce:f6:ca:b0:ce:54:f5:6f:c3:0c:bc:dd:
37:a1:d5:7f:8b:b6:23:e0:45:bb:8a:e3:af:dc:71:
c3:51:10:1f:a9:9a:69:24:a6:72:78:68:8f:91:0a:
cf:c4:7d:19:2b:7a:d4:00:03:3c:73:81:8c:2c:b3:
23:55:62:99:1e:9e:f7:17:0f:0b:6d:04:c8:fd:65:
d8:67:14:96:18:ed:b8:c7:de:84:21:64:6d:aa:f7:
73:a0:3e:83:12:3c:e3:29:15:69:c0:4d:9a:d6:be:
70:f1:19:28:32:f4:7c:fa:4f:3d:86:f2:0a:a0:d1:
09:1e:18:9a:14:87:f1:f6:6f:91:97:76:44:49:05:
d3:6b:4c:6a:00:af:a8:1c:f6:cc:0f:65:d2:9a:90:
90:83:e1:1d:c1:07:cf:64:25:9e:b5:86:7c:b3:5c:
1f:40:97:8c:f1:6d:7a:70:51:97:5c:cc:46:23:00:
a5:b1:50:ee:66:f0:c8:73:f2:ca:03:4b:e6:4b:52:
b6:e4:2f:e7:17:fe:cd:94:e4:51:51:58:70:a8:2b:
89:db:a5:cb:f8:8d:fa:ec:e7:ef:8a:fb:71:c1:36:
ca:2d:ce:90:a2:3b:cc:4e:23:35:01:c9:fd:67:ea:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:E3:7B:45:5F:00:22:92:3E:18:AD:17:33:D5:D3:16:53:56:B4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS398547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.93.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a2:50:45:32:5e:2c:fd:6c:be:03:b9:ed:ce:cb:e9:81:b5:
c7:60:1c:4b:86:77:ef:6c:56:c3:bd:71:cd:f4:b7:58:e6:50:
0b:d5:3a:c7:00:7d:11:25:ef:d3:b7:a4:67:02:5d:59:95:1b:
5d:52:db:59:d1:7f:b3:2d:5b:20:b4:6e:c7:54:27:bf:a1:77:
2a:73:fc:01:23:ab:c8:78:00:9a:67:0a:1f:5b:42:66:09:4d:
69:99:a1:b2:d4:1f:84:de:ea:5f:2b:2e:68:fd:88:be:ae:86:
5f:6a:ca:89:9e:05:98:14:66:2d:b9:6b:c6:54:d0:8b:15:2e:
b1:48:c0:72:84:02:d8:ac:4d:e0:f9:a3:f6:b3:3f:55:5e:cc:
09:58:c9:06:77:d9:19:25:e0:96:f5:c1:4c:08:1f:cd:e9:f2:
fa:3a:20:ef:9c:16:3b:41:5c:41:56:9b:77:17:65:60:6c:c4:
2f:f2:d5:6b:73:67:d0:86:f9:fc:8f:df:df:93:02:b7:c7:c1:
8c:3c:c5:a8:dc:2f:72:38:0b:55:0e:4a:86:52:83:4f:a3:ad:
5a:d0:4c:2a:07:27:85:af:6a:42:96:93:65:38:5b:ab:27:ac:
57:30:ca:7c:f2:94:af:c5:14:c6:c8:a0:14:24:0d:f0:91:f9:
a8:b4:9d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:58:02 2026 by rpki-client